Otl skan,wirusy

hosko · 15 Styczeń 2010 14:34

Witam,otóż zauważyłem w babci komputerze syfy,i proszę was o przeanalizowanie loga.

Pozdro

hosko

Leon1 · 15 Styczeń 2010 15:21

OTL w oknie Custom Scans-Fixes wklej następujący skrypt:

:Processes explorer.exe :OTL PRC - [2009-04-02 12:47:04 | 00,234,888 | ---- | M] () – C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe PRC - [2009-04-02 12:47:02 | 00,464,264 | ---- | M] () – C:\Program Files\AskBarDis\bar\bin\AskService.exe SRV - [2009-04-02 12:47:04 | 00,234,888 | ---- | M] () [Auto | Running] – C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe – (ASKUpgrade) SRV - [2009-04-02 12:47:02 | 00,464,264 | ---- | M] () [Auto | Running] – C:\Program Files\AskBarDis\bar\bin\AskService.exe – (ASKService) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedi … t=&gc=1&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedi … t=&gc=1&q= IE - HKCU…\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll () FF - prefs.js…browser.search.defaultenginename: “Ask” FF - prefs.js…browser.search.order.1: “Ask” FF - prefs.js…browser.search.selectedEngine: “Ask” FF - prefs.js…keyword.URL: “http://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&gc=1&q=” [2009-12-25 13:00:39 | 00,000,681 | ---- | M] () – C:\Documents and Settings\Kamil\Dane aplikacji\Mozilla\Firefox\Profiles\vxfzte8e.default\searchplugins\ask.xml O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKLM…\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKCU…\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O4 - HKCU…\Run: [RGSC] C:\Games\Grand Theft Auto IV\RGSC\RGSCLauncher.exe File not found O20 - AppInit_DLLs: (c:\windows\elf_key.dll) - c:\WINDOWS\elf_key.dll () O20 - Winlogon\Notify\LogonInit: DllName - logonInit.dll - C:\Program Files\Common Files\logonInit.dll () [2009-12-25 13:00:03 | 00,000,000 | —D | C] – C:\Program Files\AskSearch [2009-12-25 13:00:03 | 00,000,000 | —D | C] – C:\Program Files\AskBarDis [2010-01-14 05:14:25 | 00,111,104 | RHS- | M] () – C:\kmj.exe [2010-01-12 16:23:14 | 00,121,856 | RHS- | M] () – C:\olu392qj.exe [2010-01-10 17:52:03 | 00,000,000 | ---- | M] () – C:\Program Files\Common Files\userInit.dll [2010-01-10 16:07:57 | 00,122,368 | RHS- | M] () – C:\8xcrbho6.exe [2010-01-07 18:19:24 | 00,121,344 | RHS- | M] () – C:\f2kmj.exe [2009-12-28 16:46:36 | 00,108,032 | RHS- | M] () – C:\imghyva6.exe [2009-12-23 22:43:06 | 00,027,958 | ---- | M] () – C:\Program Files\Common Files\logonInit.dll :Files D:\kmj.exe D:\olu392qj.exe D:\8xcrbho6.exe D:\f2kmj.exe D:\imghyva6.exe :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp] [start explorer] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera.

potem nowy log OTL

Wylecz pendriva lub kartę pamięci http://www.softpedia.com/get/Security/S … Tool.shtml

Flash Disinfector http://www.searchengines.pl/index.php?s … ntry369724

lub format